Re: [Declude.JunkMail] BONDEDSENDER, spam hit on Virtumundo

[Matt]

Cyan, Please forgive me for being brash here.  I will not use your abuse system because of the following reason: http://www.bondedsender.com/commercial.jsp Get real-time data on deliverability measures. Bonded Sender provides a free personalized dashboard to monitor your complaint levels and alert you if you have been added to one of the 15 most widely deployed blacklists. I do not want to participate in a system that will share my abuse reports with a known spam house.  I neither want to give Virtumundo the benefit of this knowledge, nor do I want to expose myself any more than I already have because spam houses have been known to seek retribution, regardless of how slim that possibility may be. IronPort has something like 10,000 mail gateways in service from which you collect real-time data, much of this data is exposed through your SenderBase site, along with Google's newsgroup archives, and even Virtumundo's own site, it shouldn't take but a second to confirm the true nature of the company in question.  I will provide a zip of the full messages in private only if it is not to be shared with this client, though I can't imagine why that would be necessary.  My expectation here is that Bonded Sender should have all it needs without my involvement to do the right thing, and in the future, be more proactive in signing on clients of this sort. Again, please excuse my tone, but what I am trying to do here is force a change by voicing my honest opinion in a public forum, for whatever effect that may have.  If others feel that I am wrong to do so, I would encourage them to voice their opinions as well. Thanks, Matt Cyan Callihan wrote: Please send all of your complaints about virtumundo to [EMAIL PROTECTED]. I will investigate. Cyan -----Original Message----- From: Matt [mailto:[EMAIL PROTECTED]] Sent: Sun Jan 18 10:49:12 2004 To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] BONDEDSENDER, spam hit on Virtumundo Orin, I found a total of 8 bonded messages from Virtumundo in my capture accounts in the last 5 days (all to the same user). It's likely that some others were passed, or even deleted considering, so the total was probably 12-16 messages from this one source to this one user in all (passed entries were missed for two days). Those IP's are as follows: vl208-45.vmlocal.com [216.21.208.45] - Turn the email on your screen into a fax in their hand. vl208-44.vmlocal.com [216.21.208.44] - Make your windows as pretty as the view. vl208-52.vmlocal.com [216.21.208.52] - Too many shoes? Never heard of such a thing. vl208-54.vmlocal.com [216.21.208.54] - Get help, and get out of debt. vl208-67.vmlocal.com [216.21.208.67] - Answer all questions with a DNA test. vl208-75.vmlocal.com [216.21.208.75] - When it comes to refinancing, there really is no time like the present. vm208-78.adknow-net.com [216.21.208.78] - Low interest credit cards to get you back on your feet. vm208-66.adknow-net.com [216.21.208.66] - Need student loan consolidation? There's two things to note here; 1) the first 6 were held because I have a filter from Kami that tracked the REVDNS entry, but not the last two, 2) these are posted in order of being received, and they clearly were moving up their list of IP's in order to avoid detection, and then they changed their reverse DNS name as well (which worked in totality when bonded on my system). My point really is that if Bonded Sender really cared about "guaranteed legitimate E-mail", they would have done 10 minutes of due diligence and figured out what Virtumundo really was before ever listing them in the first place. The Bonded Sender site in fact reads like a brochure for bulk-mailers talking about how many systems they are whitelisted on, but they then turn around and protect companies like Virtumundo, either by design, or by a lack of quality control. Either way, they need to seriously rethink their business strategy because if they keep slipping up like this, they won't be able to claim any value to their paying customers. Personally, I feel like I was scammed. No big deal, it was easy enough to fix. I might suggest that some consideration be made to Declude's default inclusion and/or weighting of this test (scored at -20 currently). Matt Orin Wells wrote: Forgive me if this has been addressed before, but I would like to hear from Cyan what the policy and procedures are for de-listing a Bonded Sender when it is apparent they have disseminated spam. If I were running the show I would not only de-list them immediately, but I would bar the company from ever re-gaining certification under any name. Of course it has to be investigated to make sure the origin had not been spoofed to protect the innocent from false spamming charges. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.